System and method of discovering a network asset from a network sample

The method automates the discovery of computer network assets by analyzing sampled network traffic to identify and classify assets based on traffic volume, addressing the inefficiencies of manual methods and improving network management through anomaly detection.

US12261818B2Active Publication Date: 2025-03-25TWEENZNET LTD
13 Cites 0 Cited by

Patent Information

Application Number
US18/346803
Authority / Receiving Office
US · United States
Patent Type
Patents(United States)
Current Assignee / Owner
Priority Date
2022-07-06
Filing Date
2023-07-04
Publication Date
2025-03-25
Estimated Expiration
2043-07-04

AI Technical Summary

Technical Problem

Current methods for discovering computer network assets are time-consuming and inefficient, relying on manual analysis of network traffic and maintenance of architecture diagrams and spreadsheets.

Method used

A method and system that utilize a processor to identify IP addresses in sampled network traffic, determine traffic volumes associated with specific ports, and dynamically threshold to detect asset types by exceeding predetermined thresholds, adding discovered assets to a list, while also detecting anomalies in communication patterns.

Benefits of technology

This approach automates the discovery of computer network assets, reducing time and effort by identifying assets based on traffic volume exceeding dynamic thresholds, and detecting anomalies in communication patterns, thereby enhancing the efficiency of asset identification and network management.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

Systems and methods of discovering computer network assets, including: identifying, by a processor, in sampled traffic over at least one computer network, an internet protocol (IP) address of a node communicating over at least one port, wherein the at least one port is associated with an asset type, determining, by the processor, a volume of traffic associated with the IP address of the node communicating over the at least one port, discovering, by the processor, the IP address of the node as belonging to an asset of the asset type, based on the volume of traffic exceeding a dynamic threshold, and adding the asset, by the processor, to a list of discovered assets.
Need to check novelty before this filing date? Find Prior Art